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THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 
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Any reply received by ttie Office later than three monUis after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1 .704(b). 
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1 )□ Responsive to communication(s) filed on . 

2a)n This action is FINAL. 2t))M This action is non-final. 

3) n Since this application is in concjition for allowance except for formal matters, prosecution as to the merits is 

close(J In accordance with the practice under Ex parte Quayle, 1935 CD. 1 1 , 453 O.G. 213. 

Disposition of Claims 

4) IE Claim(s) 1-18 is/are pending in the application. 
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Application Papers 
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DETAILED ACTION 
Claim Rejections - 35 USC § 102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 
A person shall be entitled to a patent unless- 

(e) the invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351 (a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 

Claims 1-18 are rejected under 35 U.S.C. 102(e) as being anticipated by 
DeTreville (US 2004/0015694 A1). 

Regarding claim 1 , DeTreville discloses a method for authentication between an 
open system (i.e., a public accessible computer system) and a portable IC device 
(corresponding to a mobile device) (see [0010]). DeTreville discloses that a secure 
communication channel between the open system and the portable IC device that 
contains protected Information is established and the application(s) desiring to access 
this information authenticates itself to the portable IC device (see [001 1]). DeTreville 
discloses that the open computer system comprising a CPU, a secure memory 
containing a protected code called a curtained code (corresponding to the recited 
security check program), a memory storage, an operating system (corresponding to the 
recited a first program) for executing the instructions and other application programs 
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(corresponding to the recited a second program) (see Figs. 2, 3 and 7; [0037]; [0038]; 
[0102]). DeTreville further discloses that the curtained code is downloaded from the 
inner secured memory to a lesser security memory area for execution of an 
authenticating operation whenever is required by users (corresponding to the recited 
receives a secure attention instruction) in order to trust their private data to the 
applications running on the open computer system (see [0102]). DeTreville also 
discloses that a boot methodology (corresponding to the recited interrupts the execution 
of all other instructions) is used to authenticate the software programs of the open 
system to the portable IC device (see [0037]). 

Regarding claim 2, DeTreville discloses conventional bus architectures for 
receiving computer instaictions (see [0038]; [0041]). 

Regarding claim 3, DeTreville discloses a computer system for having a 
processor to execute computer instruction (see [0038]; Fig. 2). 

Regarding claim 4, DeTreville discloses that a private key is securely stored in 
such a way (internally or externally) that only CPU has the privilege to access it, for 
example, in response to a challenge from the portable IC device (corresponding to the 
recited administrative secure attention instruction) for authentication purpose (see 
[0043]-[0045]). 
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Regarding daims 5, 6, 1 1 , 15, 16 and 18, these claims are rejected as applied to 
the like elements of claim 1 as stated above and further the following: 

DeTreville discloses cryptographic keys that is used for the authentication of the 
operating system and the applications running on the open system and the result of the 
authentication are transmitted to the portable IC device when a user request 
authentication of the OS or any application program (corresponding to the recited 
execution of the security check program) (see [0037]; [0042]; [0043]; [0059]; [0060]). 

Regarding claims 7 and 9, DeTreville discloses the request (i.e., secure attention 
instruction) for authentication of the OS or an application program running on the open 
system Is issued by the portable IC device (an external source) and the CPU of the 
open system receive the request from the OS of the open system (see Fig. 2; [0012]; 
[0037]). 

Regarding claims 8 and 10, DeTreville discloses a portable IC device which is a 
secure computer device that have an authentication application (corresponding to the 
recited mobile software agent) that interact with the operating system of the open 
computer system to perform authentication process (see [0039]). 

Regarding claims 12 and 17, DeTreville discloses an authentication method that 
is called a curtain methodology (see [0037]). In this method a trusted application is 
authenticated in a secure manner regardless of the trustworthiness of the operating 
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system (corresponding to tlie recited bypass of all other parts of the secure computer 
system). 

Regarding claim 13, Delreville discloses the request (i.e., secure attention 
instruction) for authentication of the OS or an application program running on the open 
system is issued by the portable IC device (an external source) and the CPU of the 
open system receive the request from the OS of the open system (see Fig. 2; [0012]; 
[0037]). 

Regarding claim 14, DeTrevllle discloses a portable IC device which is a secure 
computer device that have an authentication application (corresponding to the recited 
mobile software agent) that interact with the operating system of the open computer 
system to perform authentication process (see [0039]). 

Conclusion 

The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

US Patent Pub. No. 2003/0196111 A1 to Lampson et al. 
US Patent Pub. No. 2004/0044906 A1 to England et al. 
US Patent Pub. No. 2004/0054907 Al to Chateau et al. 
US Patent No. 6,026,293 to Osborn. 
US Patent No. 6,789,199 B1 to Wilhelm, Jr. 
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Any inquiry concerning this comnriunication or earlier connmunications from the 
examiner should be directed to Abdulhakim Nobahar whose telephone number is 571- 
272-3808. The examiner can normally be reached on M-T 8-6. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on 571-272-3799. The fax phone number 
for the organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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Examiner /f . 
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